Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/p2SqkHDnxghT6ae_sIWkjmnKOB8.roa
File: p2SqkHDnxghT6ae_sIWkjmnKOB8.roa (raw, json)
Hash identifier: 72ShR6aPNEeS6Yf0QvRTLkSqjpzy4BoAtaTLcMdvo2Q=
Subject key identifier: A7:64:AA:90:70:E7:C6:08:53:E9:A7:BF:B0:85:A4:8E:69:CA:38:1F
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01853032AEE36EB0889665AB4B313CEF11A1
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/p2SqkHDnxghT6ae_sIWkjmnKOB8.roa
Signing time: Tue 20 Dec 2022 15:41:45 +0000
ROA not before: Tue 20 Dec 2022 15:41:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 45.146.224.0/22 maxlen: 24
185.131.188.0/22 maxlen: 24
141.98.52.0/22 maxlen: 24
185.151.176.0/22 maxlen: 24
185.114.64.0/22 maxlen: 24
185.123.136.0/22 maxlen: 24
185.126.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:32:ae:e3:6e:b0:88:96:65:ab:4b:31:3c:ef:11:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 20 15:41:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a764aa9070e7c60853e9a7bfb085a48e69ca381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a1:ed:9d:5e:8b:04:0e:b8:8f:e7:7b:b9:5e:
68:c1:bd:9e:cb:cc:ed:2c:a3:a7:3e:91:f7:03:a4:
81:d0:60:dd:4d:58:86:1e:e8:32:dd:1a:5e:57:f1:
7d:d7:41:86:53:c9:2b:8d:bf:6f:79:73:67:b1:a8:
e1:a1:95:3d:08:e3:03:b7:7e:38:3d:9f:c3:23:6d:
58:83:50:10:a6:5c:a7:15:6f:79:22:4a:d3:cd:07:
3f:09:f1:d3:fd:f1:94:1a:0a:ee:3e:db:6a:a4:b0:
1a:0c:3b:bd:63:3b:2e:f7:a4:82:33:0a:ee:9c:e4:
89:ca:40:d9:2c:87:c6:81:14:93:76:ce:65:73:41:
2b:c4:0d:83:cc:e7:84:3c:32:73:e7:00:92:c2:e1:
de:7f:3d:71:7d:eb:19:8a:63:ca:3d:5c:33:3f:53:
e5:42:ce:5b:03:21:20:ef:e1:41:e0:c4:db:e8:4f:
6d:82:9b:93:8e:bd:a3:2f:d9:67:44:65:89:a7:ef:
e8:de:6e:fa:9b:8e:c2:42:34:08:f5:9a:c3:dd:a4:
db:90:1c:05:ed:91:14:4b:59:58:e4:cd:3d:69:7f:
8f:da:18:bf:da:1a:d1:4f:b1:0a:9b:29:8e:b0:e9:
52:c5:9c:ff:7a:86:98:e8:01:ae:a7:a4:60:75:33:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:64:AA:90:70:E7:C6:08:53:E9:A7:BF:B0:85:A4:8E:69:CA:38:1F
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/p2SqkHDnxghT6ae_sIWkjmnKOB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.224.0/22
141.98.52.0/22
185.114.64.0/22
185.123.136.0/22
185.126.232.0/22
185.131.188.0/22
185.151.176.0/22
Signature Algorithm: sha256WithRSAEncryption
24:b1:f9:e6:10:6a:b4:c5:ee:7d:9d:ea:0c:5a:88:ef:06:cb:
7c:09:b1:ee:33:48:8c:58:0f:6f:6b:a9:a9:fe:bf:96:40:29:
dd:bc:cb:6b:88:0e:a7:d6:8f:ec:72:21:88:bd:4f:a2:56:42:
5c:23:be:e1:8c:89:55:9a:f7:cf:1d:83:c8:16:fb:d8:34:8e:
9f:7e:fc:30:f3:62:1c:c0:42:2c:67:8a:36:c2:4d:9f:f2:ed:
a6:d4:93:3f:3e:cd:c0:5d:78:1f:df:a6:95:93:eb:9d:f8:6b:
e2:38:1b:83:19:4a:5f:ce:34:3a:54:6f:a4:07:7e:0f:a7:11:
5f:de:17:48:7e:b8:4a:de:57:57:56:36:9c:f1:d4:29:ff:ef:
ed:11:03:50:6c:d7:05:52:0c:7b:d9:87:0a:68:c8:79:51:41:
e3:f8:de:8a:68:a7:70:c1:a8:d6:e9:fc:1a:70:2c:69:bb:0e:
c3:b2:1d:3b:36:c8:f2:b0:43:58:c1:77:7e:eb:3d:4d:f6:dc:
ae:c5:53:a5:44:71:4b:45:ea:14:d2:94:24:66:ea:f9:cd:e4:
ef:33:21:63:a0:a5:b0:2b:cb:9c:88:47:19:15:b5:8c:d9:2b:
d3:65:85:c8:b1:af:a8:7c:4b:fb:d1:b0:fd:52:21:93:fe:9e:
08:d8:4f:14
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYUwMq7jbrCIlmWrSzE87xGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjIxMjIwMTU0MTQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzY0YWE5MDcwZTdjNjA4NTNlOWE3YmZiMDg1YTQ4ZTY5Y2EzODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaHtnV6LBA64j+d7uV5owb2ey8zt
LKOnPpH3A6SB0GDdTViGHugy3RpeV/F910GGU8krjb9veXNnsajhoZU9COMDt344
PZ/DI21Yg1AQplynFW95IkrTzQc/CfHT/fGUGgruPttqpLAaDDu9Yzsu96SCMwru
nOSJykDZLIfGgRSTds5lc0ErxA2DzOeEPDJz5wCSwuHefz1xfesZimPKPVwzP1Pl
Qs5bAyEg7+FB4MTb6E9tgpuTjr2jL9lnRGWJp+/o3m76m47CQjQI9ZrD3aTbkBwF
7ZEUS1lY5M09aX+P2hi/2hrRT7EKmymOsOlSxZz/eoaY6AGup6RgdTPdlwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFKdkqpBw58YIU+mnv7CFpI5pyjgfMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvcDJTcWtIRG54Z2hUNmFlX3NJV2tqbW5LT0I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLZLgAwQC
jWI0AwQCuXJAAwQCuXuIAwQCuX7oAwQCuYO8AwQCuZewMA0GCSqGSIb3DQEBCwUA
A4IBAQAksfnmEGq0xe59neoMWojvBst8CbHuM0iMWA9va6mp/r+WQCndvMtriA6n
1o/sciGIvU+iVkJcI77hjIlVmvfPHYPIFvvYNI6ffvww82IcwEIsZ4o2wk2f8u2m
1JM/Ps3AXXgf36aVk+ud+GviOBuDGUpfzjQ6VG+kB34PpxFf3hdIfrhK3ldXVjac
8dQp/+/tEQNQbNcFUgx72YcKaMh5UUHj+N6KaKdwwajW6fwacCxpuw7Dsh07Nsjy
sENYwXd+6z1N9tyuxVOlRHFLReoU0pQkZur5zeTvMyFjoKWwK8uciEcZFbWM2SvT
ZYXIsa+ofEv70bD9UiGT/p4I2E8U
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org